A tough cookie is someone who can stand up for themselves, who is not a pushover. Usually a woman or a child, because those are the people you might expect not to have this quality. It's rather like the French 'rodé'.
('Cookie' is just American English for a British 'biscuit')